CVE-2018-16080 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.